From 8a49b21160c55d395c77105fd33326eb895f82b0 Mon Sep 17 00:00:00 2001
From: Esben Sparre Andreasen <esbena@github.com>
Date: Thu, 10 Feb 2022 14:42:30 +0100
Subject: [PATCH] denonify

---
 .../ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql b/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql
index d50fb54e1b6..5aacf8f6cf9 100644
--- a/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql
+++ b/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql
@@ -51,6 +51,6 @@ class ClientSuppliedIpUsedInSecurityCheckConfig extends TaintTracking::Configura
 from
   ClientSuppliedIpUsedInSecurityCheckConfig config, DataFlow::PathNode source,
   DataFlow::PathNode sink
-where none()
+where config.hasFlowPath(source, sink)
 select sink.getNode(), source, sink, "IP address spoofing might include code from $@.",
   source.getNode(), "this user input"